Direct Access 2012 R2 Get. Started Wiz cannot create GPO

I'm having a problem deploying a simple Direct Access installation on a 2012 R2 server, with the Getting Started Wizard. The error reads as follows:

"Configuration settings cannot be retrieved from the DirectAccess server GPO."

This comes after Finalizing configuration settings.
Then it rolls back the configuration.

The funny thing is though, if I copy the PowerShell script, it creates the GPOs just fine. But that may have something to do with the Wizard removing them when rolling back, I take it. When I use the Powershell script, I can't use the Remote Access Management afterwards cause it's missing configuration. It just wants me to re-run the Wizard.

I cannot see any problems with DNS or the DC itself. All patches are installed on the 2012 R2 server. I cannot see any problems with prerequisites either. I've tried everything I can think of.

I cannot find a single page that reflects this problem either. There are some that talks about that it cannot receive configuration settings from domain controller (something to do with GPO rights), but none that talks about the DirectAccess server.

Anyone experienced this or knows what the problem may be? If not, how do I properly debug an installation like this? I can't seem to find any verbose logs anywhere.

Who is Participating?

Ok, I may have solved it myself. I copied the Powershell script again, and ran it. This time (for no apparent reason whatsoever) the Remote Access Management Console popped up with the configuration. Everything also seems to check out, no errors anywhere.

I still wonder why the guide fails while the PS script doesn't. Isn't the script exactly what it runs in the background?

You can install GPMC Console on 2012 R2 server, ensure that you are logged on with Domain admins account, then open GPMC from 2012 R2 server and wipe out any existing GPO created by DirectAccess setup, force replication across domain and then try rerunning DirectAccess setup wizard and check

Mahesh

0

itssabAuthor Commented: 2014-01-22

I have done this several times already. This was the error message I first got when everything was fresh, and still the message I get after cleaning out the GPOs etc.

It's so weird that I can't find a single occurance of this exact error message on the web.

0

itssabAuthor Commented: 2014-01-23

This is what it looks like btw. Not very handy as it doesn't tell you more than I've already said, but what the heck...
Everything above this error is green btw.

that means it had some problem contacting the domain controller and could not get the GP settings. I would recommend making sure name resolution is not having an hiccup intermittently.

Uninstall the remote access role, and re-boot, re-install the role, start a fresh installation this time assuming the GPs have been wiped out from the DC. If you still get an error message restart the remote access management service and look for relevant logs under Remote Access management operational logs, to get more information.